Privacy policy for Zikra
Zikra by Sourav Singh
Privacy policy for Zikra
Zikra is local-first. There is no Zikra server and no account. This page describes exactly what the extension stores and the only situations in which anything leaves your device.
Everything Zikra knows lives in your browser's extension storage on your device:
- Your library: saved pages (URL, title, extracted text used for search, tags, notes, read status, timestamps) and the embedding vectors that power semantic search.
- Your settings, including your optional Anthropic API key if you add one.
- Working data: recommendation cache, cleanup undo history, and internal scheduling state.
No account or profile is created anywhere. Uninstalling the extension deletes all of this.
Three things, and only these:
- Ask and AI enrichment (only if you add your own API key, only when you trigger it).
When you ask a question or run enrichment, Zikra sends your question plus short excerpts, titles, and tags of the most relevant saved items — not your whole library — directly from your browser to the Anthropic API, along with your API key. This traffic goes to Anthropic under Anthropic's own privacy terms; Zikra has no server in the path and never sees it. With no API key set, this feature is off and nothing is ever sent. - Link-health checks.
To flag dead links, Zikra periodically sends small background requests to the URLs you have saved (batched, low-frequency). The sites you saved will see these requests coming from your browser, like a normal visit. No Zikra server is involved. - Nothing else.
Saving, searching, browsing, recommendations, and cleanup are fully local. The AI model for semantic search ships inside the extension package — Zikra never downloads models or code at runtime. There is no analytics, telemetry, crash reporting, or advertising.
When you save a page, its text is extracted inside your own browser and stored locally. It is not uploaded anywhere (it can later appear in Ask excerpts as described above, only if you use that feature).
Settings → "Clear all data" permanently removes your entire library, embeddings, settings including the API key, and all caches and scheduling state. This cannot be undone unless you previously used Export, which writes a JSON file to your machine that stays wherever you save it.